CVE-2022-2738CWE-416

The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an incorrect version of podman missing the fix for…

published September 1, 2022

CVSS
—
EPSS
1%
Percentile
59.6
In the wild
Unconfirmed
What it is

The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an incorrect version of podman missing the fix for CVE-2020-8945, which was previously fixed via RHSA-2020:2117. This issue could possibly be used to crash or cause potential code execution in Go applications that use the Go GPGME wrapper library, under certain conditions, during GPG signature verification.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00911 · 59.6th percentile
Weakness
CWE-416 · Use After Free
Published
2022-09-01T20:50Z
EPSS history
Timeline
  • 01 SEP 20:50Z
    The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an incorrect version of podman missing the fix for…
    cvelistv5